Example: Configuring Proxy RP

You can configure a virtual router to function as a proxy rendezvous point (RP). A proxy RP acts as the RP for groups learned from other zones. To configure a virtual router as a proxy RP, select Proxy when configuring the RP for PIM-SM.

In this example, the hosts in the Trust zone are to receive the multicast stream for the multicast group You configure RIP as the unicast routing protocol and create a firewall rule to pass data traffic between the Trust and Untrust zones. You create a PIM instance on the trust-vr and enable PIM on ethernet1 in the Trust zone, and on ethernet2 in the Untrust zone. ethernet1 is connected to the potential receivers; so, you also configure IGMP in router mode on this interface. You then create a multicast rule that permits PIM-SM BSR and join-prune messages between the zones.

To configure proxy RP:

  1. Configure zones and interfaces.
    • Configure ethernet1 and bind it to the Trust zone.
    • Select IGMP in router mode on ethernet1.
    • Configure ethernet2 and bind it to the Untrust zone.
  2. Configure the following address objects:
    • Multicast group IP address.
    • Source IP address
    • Configure the access list that permits traffic from multicast group 224.4.4.
  3. Configure RIP.
    • Create a RIP instance on the trust-vr.
    • Select RIP on ethernet1 and on ethernet3.
  4. Configure PIM-SM.
    • Create a PIM-SM instance on the trust-vr.
    • Select Enable in the Parameters screen.
    • Select PIM-SM on ethernet1 and on ethernet3.
  5. Configure a firewall rule that permits unicast and multicast data traffic to pass between zones.
  6. Configure a multicast rule permitting PIM-SM messages to pass between zones

Related Documentation